Extracted

Extracted

• • Target

    orden de compra 211123_Arvilab srl.exe

  • Size

    52KB

  • MD5

    8f1451919fb5f5da4ae9fb9e8422dfcf

  • SHA1

    1d7f3ae4c3a73a801fd1f74387248f5c63d9582c

  • SHA256

    bfcf7363ce0cf820c23913eacab873e1f9bc51b14611e2cac22f7a78529b18ee

  • SHA512

    9a772675a0fb7dfc561967d7a9f3d8d97d272607b0d743f8d4865059cc4e4bf2551075115bba459387e836c460482be714a78eeeec9df1fe74e256c3dac74e09

  • SSDEEP

    384:lebUqIH2VIGJfZf0iTbZ0yITJOHOfHgNN0G+37Zvj66QnzVcTaOidKjWPe9qbvW:w/p0IETJOHOfHgNNU766QYaOiz

  Score

  10^/10

  purecrypterdownloaderloaderagentteslacollectionkeyloggerspywarestealertrojan

  • AgentTesla

    Agent Tesla is a remote access tool (RAT) written in visual basic.

    keyloggertrojanstealerspywareagenttesla

  • PureCrypter

    PureCrypter is a .NET malware loader first seen in early 2021.

    loaderdownloaderpurecrypter

  • Accesses Microsoft Outlook profiles

    collection

  • Suspicious use of SetThreadContext

  behavioral1behavioral2